# Top **URL:** https://discuss.elastic.co/top.md?page=1328&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1329 --- ## [How to know when default logstash index created every day](https://discuss.elastic.co/t/how-to-know-when-default-logstash-index-created-every-day/54792)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 3\ **Last updated:** [July 6, 2016, 8:37pm UTC](https://discuss.elastic.co/t/how-to-know-when-default-logstash-index-created-every-day/54792 "2016-07-06T20:37:55Z")
how to check --- ## [Strange issue with search in DEV and UAT](https://discuss.elastic.co/t/strange-issue-with-search-in-dev-and-uat/48034)
**Author:** [@soorajhere](https://discuss.elastic.co/u/soorajhere)\ **Replies:** 3\ **Last updated:** [April 22, 2016, 6:30am UTC](https://discuss.elastic.co/t/strange-issue-with-search-in-dev-and-uat/48034 "2016-04-22T06:30:59Z")
Hi All, I need some help from you on this one as i am unable to figure out what is the root cause. I have indexed some data in my DEV and same in UAT servers. Both the yml file, indexing mechanism and the index name… --- ## [Number of snapshots stored/retained in a repository](https://discuss.elastic.co/t/number-of-snapshots-stored-retained-in-a-repository/27511)
**Author:** [@janwe](https://discuss.elastic.co/u/janwe)\ **Replies:** 3\ **Last updated:** [August 21, 2015, 9:36am UTC](https://discuss.elastic.co/t/number-of-snapshots-stored-retained-in-a-repository/27511 "2015-08-21T09:36:27Z")
Dear Forum, We are currently running Elasticsearch 1.5.2 which we attempt to back up every midnight by issuing a createSnapshot API call to a shared file system repo backup. What puzzles us is that in our QA and produc… --- ## [Upgrade order (best practices)](https://discuss.elastic.co/t/upgrade-order-best-practices/26992)
**Author:** [@podollb](https://discuss.elastic.co/u/podollb)\ **Replies:** 3\ **Last updated:** [August 7, 2015, 11:21pm UTC](https://discuss.elastic.co/t/upgrade-order-best-practices/26992 "2015-08-07T23:21:19Z")
When upgrading a service (i.e. such as a spring boot application that uses the elasticsearch client library), and also an ElasticSearch cluster, to use a new version (say an upgrade from 1.6.0 to 1.6.2), what order is be… --- ## [How to hide rows in table without affecting search criteria](https://discuss.elastic.co/t/how-to-hide-rows-in-table-without-affecting-search-criteria/329033)
**Author:** [@abhardwaj](https://discuss.elastic.co/u/abhardwaj)\ **Replies:** 4\ **Last updated:** [March 31, 2023, 9:35am UTC](https://discuss.elastic.co/t/how-to-hide-rows-in-table-without-affecting-search-criteria/329033 "2023-03-31T09:35:36Z")
Hello, I am creating a kibana visualization table based on few test run results in my elasticsearch index. Following is the composition of value hits. Following is the output table having the results captured T… --- ## [Execute reindex and the task is not found](https://discuss.elastic.co/t/execute-reindex-and-the-task-is-not-found/279414)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 4\ **Last updated:** [July 23, 2021, 2:40am UTC](https://discuss.elastic.co/t/execute-reindex-and-the-task-is-not-found/279414 "2021-07-23T02:40:37Z")
First I execute the reindex POST \_reindex?wait\_for\_completion=false { "conflicts": "proceed", "source": { "index": "wh\_crm\_student\_order\_2020.11.09" }, "dest": { "index": "wh\_crm\_student\_order\_new\_2020.1… --- ## [All output pipelines stop when one errors (using pipeline-to-pipeline)](https://discuss.elastic.co/t/all-output-pipelines-stop-when-one-errors-using-pipeline-to-pipeline/279155)
**Author:** [@mgeldert](https://discuss.elastic.co/u/mgeldert)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 5:45pm UTC](https://discuss.elastic.co/t/all-output-pipelines-stop-when-one-errors-using-pipeline-to-pipeline/279155 "2021-07-20T17:45:39Z")
I'm running logstash 7.12.1 in a container based on the standard Docker image, with the New Relic output installed on top. Despite the fact I am using pipeline-to-pipeline, I am hitting a situation where, if one output … --- ## [Kibanaにてインデックスライフサイクルを変更しても初期値に戻る](https://discuss.elastic.co/t/kibana/273640)
**Author:** [@K.taka99](https://discuss.elastic.co/u/K.taka99)\ **Replies:** 4\ **Last updated:** [June 10, 2021, 8:59am UTC](https://discuss.elastic.co/t/kibana/273640 "2021-06-10T08:59:54Z")
Elsticsearch7.9.0とkibana 7.9.0にてシステムを構築を進めています。 kibanaのインデックスライフサイクル管理（ILM）からライフサイクルの変更を行いましたが、1時間程度経過すると、初期値に戻ってしまいます。 強制ロールアップさせて設定を反映させても、次のロールアップで初期値に戻ります。 考えられる要因が分かる方がいましたら、教えていただけますでしょうか。 宜しくお願いいたします。 --- ## [CloudFlare X-Forwarded-For Real Source IP](https://discuss.elastic.co/t/cloudflare-x-forwarded-for-real-source-ip/239973)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 7:50am UTC](https://discuss.elastic.co/t/cloudflare-x-forwarded-for-real-source-ip/239973 "2020-07-08T07:50:45Z")
Hi, I'm new to Elastic and need help to find the real IP of nginx site visitor. The environment I have is Nginx module installed in Filebeat and reading the data passed via logstash to elasticsearch and viewed in kiban… --- ## [Metricbeat -c /etc/metricbeat.yml logs goes to the path specified , when stating with systemctl it does not](https://discuss.elastic.co/t/metricbeat-c-etc-metricbeat-yml-logs-goes-to-the-path-specified-when-stating-with-systemctl-it-does-not/206273)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 4\ **Last updated:** [November 13, 2019, 10:54am UTC](https://discuss.elastic.co/t/metricbeat-c-etc-metricbeat-yml-logs-goes-to-the-path-specified-when-stating-with-systemctl-it-does-not/206273 "2019-11-13T10:54:22Z")
Hi All, Good morning I am experiencing a strange observation here with logs when I run metricbeat -c /etc/metricbeat/metricbeat.yml the logs goes to the specified location else not going, ie when started as servic… --- ## [Deployment health issue: Snapshots out of date (latest success was 23 hours ago)](https://discuss.elastic.co/t/deployment-health-issue-snapshots-out-of-date-latest-success-was-23-hours-ago/161993)
**Author:** [@princeOfMacedon](https://discuss.elastic.co/u/princeOfMacedon)\ **Replies:** 4\ **Last updated:** [December 26, 2018, 6:00am UTC](https://discuss.elastic.co/t/deployment-health-issue-snapshots-out-of-date-latest-success-was-23-hours-ago/161993 "2018-12-26T06:00:37Z")
Hi all, I'm using filebeat to push log to elastic cloud. After using elastic-curator to add snapshots and backup some old indices to S3, I've encounter this error on elastic cloud console: Deployment health issue: Sna… --- ## [LocalJumpError Logstash 2.3.0](https://discuss.elastic.co/t/localjumperror-logstash-2-3-0/46984)
**Author:** [@diwertowski](https://discuss.elastic.co/u/diwertowski)\ **Replies:** 4\ **Last updated:** [April 20, 2016, 12:06pm UTC](https://discuss.elastic.co/t/localjumperror-logstash-2-3-0/46984 "2016-04-20T12:06:34Z")
Logstash 2.3.0 Windows Server 2008 If I start my Logstash-Shipper with this output-configuation... output { redis { host =\> \["redisserver1:6379","redisserver2:6380"\] shuffle\_hosts =\> true … --- ## [Monitor failed elastic user logins](https://discuss.elastic.co/t/monitor-failed-elastic-user-logins/250045)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 1\ **Last updated:** [September 26, 2020, 10:54pm UTC](https://discuss.elastic.co/t/monitor-failed-elastic-user-logins/250045 "2020-09-26T22:54:39Z")
Hi, I was wondering if there is a way to temporarily ban an IP or even a user profile who entered its password wrong for N time. In general, is there a way to monitor user login attempts and automatically act upon it? --- ## [An unexpected error occurred: Cannot convert undefined or null to object](https://discuss.elastic.co/t/an-unexpected-error-occurred-cannot-convert-undefined-or-null-to-object/224946)
**Author:** [@Swapnil\_Ghorpade](https://discuss.elastic.co/u/Swapnil_Ghorpade)\ **Replies:** 1\ **Last updated:** [March 25, 2020, 11:34am UTC](https://discuss.elastic.co/t/an-unexpected-error-occurred-cannot-convert-undefined-or-null-to-object/224946 "2020-03-25T11:34:40Z")
PFA @JasonStoltz is it because of facets are not in search response? if yes then how to handle it ? --- ## [Periodically Query And Process Only New Records](https://discuss.elastic.co/t/periodically-query-and-process-only-new-records/108240)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 4:46pm UTC](https://discuss.elastic.co/t/periodically-query-and-process-only-new-records/108240 "2017-11-18T16:46:21Z")
Hello everybody, Background: In our system events arrives in stream. In most cases, we just need to index (Add) the events to new or existsing documnts (Upsert), however there is one event in which we need to update ex… --- ## [Should I send the logs from logstash hosts to data nodes or master nodes?](https://discuss.elastic.co/t/should-i-send-the-logs-from-logstash-hosts-to-data-nodes-or-master-nodes/71420)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 1\ **Last updated:** [January 12, 2017, 7:34pm UTC](https://discuss.elastic.co/t/should-i-send-the-logs-from-logstash-hosts-to-data-nodes-or-master-nodes/71420 "2017-01-12T19:34:51Z")
which node for storing the logs? --- ## [Sending SNMP trap messages to ZABBIX](https://discuss.elastic.co/t/sending-snmp-trap-messages-to-zabbix/24136)
**Author:** [@Cenzoooo](https://discuss.elastic.co/u/Cenzoooo)\ **Replies:** 1\ **Last updated:** [June 23, 2015, 5:47am UTC](https://discuss.elastic.co/t/sending-snmp-trap-messages-to-zabbix/24136 "2015-06-23T05:47:10Z")
Hello, Is it possible, and if it is how to configure Logstash to send SNMP traps to Zabbix? --- ## [Import CSV with date fields not usable as timestamp field](https://discuss.elastic.co/t/import-csv-with-date-fields-not-usable-as-timestamp-field/333373)
**Author:** [@Vortex\_SLT](https://discuss.elastic.co/u/Vortex_SLT)\ **Replies:** 6\ **Last updated:** [May 14, 2023, 8:02pm UTC](https://discuss.elastic.co/t/import-csv-with-date-fields-not-usable-as-timestamp-field/333373 "2023-05-14T20:02:32Z")
Hello, I'm currently try to use a date fields imported form a CVS via filebeat to the elasticsearch. (v 7.17.10) The field have this format : "2023-03-07 15:19:11" and I would like to use it as timestamp field. I trie… --- ## [Logstash reading the input files but not parsing it](https://discuss.elastic.co/t/logstash-reading-the-input-files-but-not-parsing-it/144404)
**Author:** [@Samvid\_Kulkarni](https://discuss.elastic.co/u/Samvid_Kulkarni)\ **Replies:** 6\ **Last updated:** [August 14, 2018, 10:19pm UTC](https://discuss.elastic.co/t/logstash-reading-the-input-files-but-not-parsing-it/144404 "2018-08-14T22:19:58Z")
logstash is reading input files but it is not displaying anything on the output. No errors are generated as well. when i do --verbose it gives me following output Sending Logstash's logs to /usr/local/Cellar/logsta… --- ## [Kibana can't open binary file](https://discuss.elastic.co/t/kibana-cant-open-binary-file/121080)
**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\ **Replies:** 6\ **Last updated:** [February 23, 2018, 2:58pm UTC](https://discuss.elastic.co/t/kibana-cant-open-binary-file/121080 "2018-02-23T14:58:27Z")
Hello, I've just installed Kibana in a Centron, but when I start kibana I get this: \[image\] It says that kibana can't open binary file. Kibana has right to access (already chmod) I checked forums and it says it's a p… --- ## [Errors when connecting Filebeat to logstash](https://discuss.elastic.co/t/errors-when-connecting-filebeat-to-logstash/92835)
**Author:** [@Baco](https://discuss.elastic.co/u/Baco)\ **Replies:** 6\ **Last updated:** [July 13, 2017, 9:43am UTC](https://discuss.elastic.co/t/errors-when-connecting-filebeat-to-logstash/92835 "2017-07-13T09:43:22Z")
Hello, Would you like to help me understand why i have errors below when I try to connect filebeat to logstash. An unexpected error occurred! {:error=\>#\ **Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [November 3, 2026, 4:27pm UTC](https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-203/391357 "2026-11-03T16:27:15Z") Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure via A… --- ## [Fleet Agent Upgrade](https://discuss.elastic.co/t/fleet-agent-upgrade/351053)
**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\ **Replies:** 8\ **Last updated:** [January 30, 2024, 12:11pm UTC](https://discuss.elastic.co/t/fleet-agent-upgrade/351053 "2024-01-30T12:11:31Z")
When using Fleet to upgrade the Elastic Agent, Kibana and Elasticsearch needed to bu upgraded first, before the Agent Upgrade becomes available according to the docs. If I upgrade Kibana/Elasticsearch from 8.11.1 to 8.1… --- ## ["Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"{\\", \\"}\\"](https://discuss.elastic.co/t/expected-one-of-t-r-n/269151)
**Author:** [@tmrgbox](https://discuss.elastic.co/u/tmrgbox)\ **Replies:** 2\ **Last updated:** [April 4, 2021, 8:14am UTC](https://discuss.elastic.co/t/expected-one-of-t-r-n/269151 "2021-04-04T08:14:35Z")
Hi, I'm trying to parse a log using the following config: input { udp { port =\> 5555 type =\> "esetlog" add\_field =\> { "etl\_input\_port" =\> 5555 "etl\_input\_protocol" =\> "udp" } } } filter { if \[type\] == "eset… --- ## [Delete by query api - \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/delete-by-query-api-forbidden-8-index-write-api/244188)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 8:35am UTC](https://discuss.elastic.co/t/delete-by-query-api-forbidden-8-index-write-api/244188 "2020-08-10T08:35:11Z")
Hello, The version of our Elasticsearch is: 7.8 (Platinum) I tried to delete some indices by using delete\_by\_query and I have the following error. "type" : "cluster\_block\_exception", "reason" : "index \[shrin… --- ## [怎么在java代码里使用sum\_bucket聚合操作](https://discuss.elastic.co/t/java-sum-bucket/161295)
**Author:** [@fengyuning](https://discuss.elastic.co/u/fengyuning)\ **Replies:** 2\ **Last updated:** [December 20, 2018, 6:17am UTC](https://discuss.elastic.co/t/java-sum-bucket/161295 "2018-12-20T06:17:03Z")
--- ## [Getting class\_cast\_exception for index pattern that is created based on two index](https://discuss.elastic.co/t/getting-class-cast-exception-for-index-pattern-that-is-created-based-on-two-index/130217)
**Author:** [@sjain135](https://discuss.elastic.co/u/sjain135)\ **Replies:** 2\ **Last updated:** [May 3, 2018, 6:05am UTC](https://discuss.elastic.co/t/getting-class-cast-exception-for-index-pattern-that-is-created-based-on-two-index/130217 "2018-05-03T06:05:10Z")
I have created the index pattern as df3df2\* on two index(df3df2\_snap and df3df2\_raw). The data type mapping of the fields are String and Float. When I am looking for data of index df3df2\*, i am getting error as Error:… --- ## [Delete / Rename File after Reading](https://discuss.elastic.co/t/delete-rename-file-after-reading/62693)
**Author:** [@TWalter](https://discuss.elastic.co/u/TWalter)\ **Replies:** 2\ **Last updated:** [October 11, 2016, 1:53pm UTC](https://discuss.elastic.co/t/delete-rename-file-after-reading/62693 "2016-10-11T13:53:47Z")
Hello there, is there any possibility where you can rename or delete files, which are finished by reading with Logstash? Thanks to all. --- ## [Treating DOT as space](https://discuss.elastic.co/t/treating-dot-as-space/43279)
**Author:** [@Arvind\_Kumar\_Chigura](https://discuss.elastic.co/u/Arvind_Kumar_Chigura)\ **Replies:** 2\ **Last updated:** [March 11, 2016, 7:29pm UTC](https://discuss.elastic.co/t/treating-dot-as-space/43279 "2016-03-11T19:29:42Z")
Continuing the discussion from Dot not used as delimiter: How do I update the word\_delimter filter to look for dot and convert that to space ? --- ## [Logstash\_1.4.2 : add double quote with grok](https://discuss.elastic.co/t/logstash-1-4-2-add-double-quote-with-grok/33981)
**Author:** [@florian.dhaussy](https://discuss.elastic.co/u/florian.dhaussy)\ **Replies:** 2\ **Last updated:** [November 6, 2015, 11:38am UTC](https://discuss.elastic.co/t/logstash-1-4-2-add-double-quote-with-grok/33981 "2015-11-06T11:38:23Z")
Hi, I'm actually trying to generate a csv file, for a GeoIP database. My goal is to have this: "startIpNum","endIpNum","locId" And i actually have this, without the double quotes: startIpNum,endIpNum,locId How … --- ## [Topbeat with ES2.0?](https://discuss.elastic.co/t/topbeat-with-es2-0/31281)
**Author:** [@imre](https://discuss.elastic.co/u/imre)\ **Replies:** 2\ **Last updated:** [September 28, 2015, 10:02pm UTC](https://discuss.elastic.co/t/topbeat-with-es2-0/31281 "2015-09-28T22:02:48Z")
Is anyone using Topbeat with ES2.0? It's failing on me because of the commas in the field names: status:400 reason: Field name \[proc.cpu\] cannot contain '.' --- ## [License information/doubt](https://discuss.elastic.co/t/license-information-doubt/26581)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 2\ **Last updated:** [July 30, 2015, 5:41pm UTC](https://discuss.elastic.co/t/license-information-doubt/26581 "2015-07-30T17:41:28Z")
After setting up the elastic shield in cluster I applied license in master node . Now to see the license information in master node I typed in the elsaticsearch URL and port 9200 curl --user adminuser http://localho… --- ## [Fix field values while importing](https://discuss.elastic.co/t/fix-field-values-while-importing/24047)
**Author:** [@refaelos](https://discuss.elastic.co/u/refaelos)\ **Replies:** 2\ **Last updated:** [June 22, 2015, 5:29am UTC](https://discuss.elastic.co/t/fix-field-values-while-importing/24047 "2015-06-22T05:29:30Z")
Hey, When I fetch events from S3 into ES i'm getting multiple errors like this: Caused by: org.elasticsearch.common.jackson.core.JsonParseException: Numeric value (9223372036854776000) out of range of long (-922337… --- ## [Case sensitivity](https://discuss.elastic.co/t/case-sensitivity/5249)
**Author:** [@Christopher\_Burkey\_3](https://discuss.elastic.co/u/Christopher_Burkey_3)\ **Replies:** 2\ **Last updated:** [August 26, 2011, 2:08pm UTC](https://discuss.elastic.co/t/case-sensitivity/5249 "2011-08-26T14:08:57Z")
Do I need to lower case my searches before I send them to Elasticsearch? I would think for text and wildcard queries Elasticsearch search\_analyzer would take care of it. Here is a test that searches for "TR" in uppe… --- ## [Vulnerable Java version bundled with 8.14.3 & 8.15](https://discuss.elastic.co/t/vulnerable-java-version-bundled-with-8-14-3-8-15/364861)
**Author:** [@dan\_walker](https://discuss.elastic.co/u/dan_walker)\ **Replies:** 5\ **Last updated:** [August 14, 2024, 1:37pm UTC](https://discuss.elastic.co/t/vulnerable-java-version-bundled-with-8-14-3-8-15/364861 "2024-08-14T13:37:14Z")
Java 22.0.1 contains a HIGH vulnerability, as indicated by CVEs reported in July 2024. This version is/was bundled with ES 8.14.3. I was expecting a version patch to be included in the next ES release, but looking at th… --- ## [JVM heap recommendations on k8s cluster](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 5\ **Last updated:** [December 28, 2022, 3:02pm UTC](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017 "2022-12-28T15:02:05Z")
Hi, I would like to know what is the recommendation about the heap size when operating ES nodes in a k8s cluster. I have referred this and it is not fully clear what is the recommendation. Manage compute resources | Ela… --- ## [Rabbitmq output plugin : dynamic values on headers not working](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475)
**Author:** [@MarineW29](https://discuss.elastic.co/u/MarineW29)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 4:25pm UTC](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475 "2021-01-08T16:25:16Z")
Hello, I have a pipeline with elasticsearch input and rabbitmq output. I would like to set dynamic values to headers in properties of the message published in RabbitMQ, but the field are not replaces with their values. … --- ## [Parsing Logs based on a Regex sequence (Prune, Grok, Mutate)](https://discuss.elastic.co/t/parsing-logs-based-on-a-regex-sequence-prune-grok-mutate/234933)
**Author:** [@clearedskies](https://discuss.elastic.co/u/clearedskies)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 12:18pm UTC](https://discuss.elastic.co/t/parsing-logs-based-on-a-regex-sequence-prune-grok-mutate/234933 "2020-06-01T12:18:48Z")
The set-up I currently have is Filebeat --\> Logstash --\> Elasticsearch --\> Kibana. Filebeat naturally comes with a series of fields (that can be turned off in filebeat.yml) and I am trying to parse them in Logstash so c… --- ## [Elasticsearch node going offline after installing x-pack in kibana](https://discuss.elastic.co/t/elasticsearch-node-going-offline-after-installing-x-pack-in-kibana/136789)
**Author:** [@Praneeth](https://discuss.elastic.co/u/Praneeth)\ **Replies:** 5\ **Last updated:** [June 21, 2018, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-node-going-offline-after-installing-x-pack-in-kibana/136789 "2018-06-21T09:57:15Z")
Hi, Elastic search version - 5.5.1 Kibana version - 5.5.1 x-pack version - 5.5.1 System: centos, Running in a VM System RAM: 3000MB Single core processor First, I have installed elastic search with x-pack(trail versi… --- ## [Task Manager is unhealthy - Reason: setting HealthStatus.Error because assumedRequired Throughput PerMinutePerKibana](https://discuss.elastic.co/t/task-manager-is-unhealthy-reason-setting-healthstatus-error-because-assumedrequired-throughput-perminuteperkibana/360070)
**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\ **Replies:** 1\ **Last updated:** [May 25, 2024, 11:59am UTC](https://discuss.elastic.co/t/task-manager-is-unhealthy-reason-setting-healthstatus-error-because-assumedrequired-throughput-perminuteperkibana/360070 "2024-05-25T11:59:25Z")
Hello Comuninty, I'm facing this issue in my kibana after upgrading it from 8.9 to 8.13 here is the error i,m facing Task Manager is unhealthy - Reason: setting HealthStatus.Error because assumedRequiredThroughputPerM… --- ## [Machine learning "actual" value doesn't match values displayed in a vizualization](https://discuss.elastic.co/t/machine-learning-actual-value-doesnt-match-values-displayed-in-a-vizualization/258658)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 7\ **Last updated:** [December 16, 2020, 12:27pm UTC](https://discuss.elastic.co/t/machine-learning-actual-value-doesnt-match-values-displayed-in-a-vizualization/258658 "2020-12-16T12:27:09Z")
In amonaly detection I get an actual value of "75.0" when I go to a visualization of the raw data I cant find that actual value, I was thinking that maybe the agregation was blurring the value, but I choose a smaller int… --- ## [Filebeat and AWS Module unable to get CloudTrail logs](https://discuss.elastic.co/t/filebeat-and-aws-module-unable-to-get-cloudtrail-logs/230670)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 11:05pm UTC](https://discuss.elastic.co/t/filebeat-and-aws-module-unable-to-get-cloudtrail-logs/230670 "2020-05-28T23:05:45Z")
Hi I am having troubles getting the Filebeat AWS module to work with CloudTrail logs. I believe I have followed everything correctly as per the documentation but can't seem to get it working. All components are runnin… --- ## [Log rotation for cluster log file configure in log4j2 properties](https://discuss.elastic.co/t/log-rotation-for-cluster-log-file-configure-in-log4j2-properties/230227)
**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 5:55pm UTC](https://discuss.elastic.co/t/log-rotation-for-cluster-log-file-configure-in-log4j2-properties/230227 "2020-04-29T17:55:34Z")
We are using the ES 7.4.2 Our log4j2.properties has the following configuration Even policy appender.rolling.policies.time.interval = 1 set to 1 day, still log file is not rotated. As soon as re restart the elasticsea… --- ## [Weird match\_phrase\_prefix search behaviour with french analyzer](https://discuss.elastic.co/t/weird-match-phrase-prefix-search-behaviour-with-french-analyzer/222739)
**Author:** [@rursprung](https://discuss.elastic.co/u/rursprung)\ **Replies:** 7\ **Last updated:** [April 3, 2020, 3:42pm UTC](https://discuss.elastic.co/t/weird-match-phrase-prefix-search-behaviour-with-french-analyzer/222739 "2020-04-03T15:42:04Z")
i noticed a weird search behaviour with the french analyzer (could probably also affect other languages). i have boiled down our example to a minimal PoC, the original index & query were much bigger. our query is used i… --- ## [DISK I/O Monitor alert from new relic for Elastic search nodes](https://discuss.elastic.co/t/disk-i-o-monitor-alert-from-new-relic-for-elastic-search-nodes/215981)
**Author:** [@Ajay16](https://discuss.elastic.co/u/Ajay16)\ **Replies:** 7\ **Last updated:** [January 22, 2020, 1:39pm UTC](https://discuss.elastic.co/t/disk-i-o-monitor-alert-from-new-relic-for-elastic-search-nodes/215981 "2020-01-22T13:39:53Z")
i am getting disk i/o monitor alert from new relic for the elastic search nodes(2 nodes)., how can i resolve this issue., help me out of this.,new to elastic search --- ## [How to monitor CPU, and other device, temps?](https://discuss.elastic.co/t/how-to-monitor-cpu-and-other-device-temps/196679)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 2:50am UTC](https://discuss.elastic.co/t/how-to-monitor-cpu-and-other-device-temps/196679 "2019-08-26T02:50:10Z")
Is there an up to date means that would allow me to monitor my local system temperatures? CPU, GPU, HDD's, etc. This is on a Linux based machine, so I did try lmsensorsbeat. But it seems to be pretty out of date. I'm ru… --- ## [Problem with ingest node pipeline setup - java.lang.Integer cannot be cast to class java.lang.Long](https://discuss.elastic.co/t/problem-with-ingest-node-pipeline-setup-java-lang-integer-cannot-be-cast-to-class-java-lang-long/166490)
**Author:** [@yucheng](https://discuss.elastic.co/u/yucheng)\ **Replies:** 1\ **Last updated:** [February 2, 2019, 2:14pm UTC](https://discuss.elastic.co/t/problem-with-ingest-node-pipeline-setup-java-lang-integer-cannot-be-cast-to-class-java-lang-long/166490 "2019-02-02T14:14:46Z")
Hi there, I was trying to use es(6.5) ingest node pipeline (instead of logstash) to extract info from filebeat (6.5) logs, however my pipeline (as following) seemed not work in simulation. POST \_ingest/pipeline/\_simula… --- ## [Can't start Elasticsearch service, Version: 6.3.2.0](https://discuss.elastic.co/t/cant-start-elasticsearch-service-version-6-3-2-0/165783)
**Author:** [@ERD](https://discuss.elastic.co/u/ERD)\ **Replies:** 1\ **Last updated:** [January 26, 2019, 6:49am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-service-version-6-3-2-0/165783 "2019-01-26T06:49:48Z")
I did a new installation on Windows Server 2012R2 64 Bit and 16GB Ram. And the service don't start. Error: "The process was terminated due to an unhandled exception." This is the windows event log: Application: elasti… --- ## [Convert curl command to logstash-output-http](https://discuss.elastic.co/t/convert-curl-command-to-logstash-output-http/94871)
**Author:** [@lynchnf](https://discuss.elastic.co/u/lynchnf)\ **Replies:** 1\ **Last updated:** [August 5, 2017, 6:15pm UTC](https://discuss.elastic.co/t/convert-curl-command-to-logstash-output-http/94871 "2017-08-05T18:15:28Z")
I’m trying to replicate a curl command with Logstash 5.2.2 on a computer running Windows. The curl command is: curl -k -u "lynchnf:swordfish" https://mycompany.com:9998/some/service -d '{"event": {"some":"random","json… [Previous page](https://discuss.elastic.co/top.md?page=1327&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1329&per_page=50&period=all)